PT-2020-3003 · Apache+1 · Apache Tomcat+1

Matthias Gerstner · Published 2020-06-26 · Updated 2024-03-06 · CVE-2020-8022

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions tomcat versions prior to 8.0.53-29.32.1 tomcat versions prior to 9.0.35-3.39.1 tomcat versions prior to 9.0.35-3.57.3

Description A vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8 allows local attackers to escalate from group tomcat to root. This issue is related to incorrect default permissions in the /usr/lib/tmpfiles.d/tomcat.conf component of the tomcat package.

Recommendations For tomcat versions prior to 8.0.53-29.32.1, update to version 8.0.53-29.32.1 or later. For tomcat versions prior to 9.0.35-3.39.1, update to version 9.0.35-3.39.1 or later. For tomcat versions prior to 9.0.35-3.57.3, update to version 9.0.35-3.57.3 or later.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2020-03225

BIT-TOMCAT-2020-8022

CVE-2020-8022

GHSA-GC58-V8H3-X2GR

OPENSUSE-SU-2020:0911-1

OPENSUSE-SU-2020_0911-1

SUSE-SU-2020:1788-1

SUSE-SU-2020:1789-1

SUSE-SU-2020:1790-1

SUSE-SU-2020:1791-1

SUSE-SU-2020_1788-1

SUSE-SU-2020_1789-1

SUSE-SU-2020_1790-1

SUSE-SU-2020_1791-1

Affected Products

Suse

Apache Tomcat

References · 31

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=1172405 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2020:0911-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1788-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1789-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tomcat-2020-8022 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1791-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gc58-v8h3-x2gr · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03225 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-8022 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00066.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8022 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1790-1 · Vendor Advisory
• https://t.me/cvenotify/10983 · Telegram Post
• https://suse.com/security/cve/CVE-2020-8022 · Note
• https://lists.apache.org/thread.html/rf50d02409e5732c4ee37f19a193af171251a25a652599ce3c2bc69e7@%3Cusers.tomcat.apache.org%3E · Note